This is the declarative configuration for my entire homelab. It's currently a single machine running NixOS to host a bare-metal Kubernetes cluster.
For more about the methodology and details of the configuration, read my posts about this homelab.
- Declarative Configuration
- Continuous Focus on Security
- NixOS Host Operating System
- (Mostly) Unattended Installation
- Automated Deployments
- Secure Boot
- At-Rest Encryption
- Secure SSH Access
- Kubernetes Bare-Metal
- Cilium CNI
- GitOps via ArgoCD
- Rook Storage
- Vault Secrets Storage
- CSI Secrets Store Driver
- External DNS
- Prometheus/Tempo/Loki telemetry storage
- OpenTelemetry
- Cilium Hubble for networking o11y
- Grafana Dashboards